This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer (raw, json) Hash identifier: GtpFhXeETrhnU10V+fIwIhBezohtG69K5T96B1RahFE= Subject key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7120 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 08:27:07 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.102.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28960 (0x7120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 30 08:27:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:b6:ab:b6:43:4e:7d:06:76:a9:87:f2:23: 2c:e5:76:6e:02:4e:46:9c:a6:ca:19:a3:96:cd:4d: 53:67:df:b2:2d:d2:ca:07:5c:3d:8e:20:a9:50:0c: 02:68:9c:55:7d:eb:e3:dd:93:98:2f:5d:c0:87:3d: 55:de:17:79:bf:22:ed:71:c9:d7:7d:15:d5:ad:76: 33:4d:a8:77:7a:b1:0f:15:06:0e:6a:37:48:8e:57: 9e:c6:5e:3e:e1:74:65:af:ca:c9:ea:c1:71:b9:b3: c6:76:96:95:eb:5d:ce:89:77:cd:cc:73:4e:ed:e8: 62:65:6b:19:ed:85:80:7e:f8:33:06:a9:37:e3:63: 7f:6a:e7:fc:21:71:d0:b1:93:f1:e4:bd:e8:bc:50: a8:fd:8f:57:a8:36:c0:ba:b8:51:d0:17:a2:62:e0: e0:d1:d2:5a:ed:3c:89:5f:32:8a:d9:0b:b2:57:24: d0:7b:56:5e:5c:31:a0:6c:4c:73:f9:9c:43:d0:a6: 2b:8f:3d:5b:e4:58:e2:64:a1:28:e9:7e:aa:07:30: 37:26:2e:84:fc:aa:73:09:28:9b:3b:e5:2b:7a:fe: 20:4e:9d:07:78:77:e1:f8:61:45:17:2a:4a:a4:0e: c3:93:4d:95:2a:89:44:f9:ac:64:94:e4:2d:b7:8c: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.102.0/24 Signature Algorithm: sha256WithRSAEncryption 79:8f:63:33:23:99:8f:cc:8b:91:4d:ed:d2:29:f7:c7:15:91: 71:fc:46:c3:0a:39:2c:a6:94:d9:de:a2:91:ee:27:71:7b:17: 52:53:2b:17:1b:33:f4:67:87:4c:73:cf:eb:72:99:3a:07:be: 15:87:3b:93:e6:61:b7:8d:79:ff:97:aa:05:f5:21:68:81:4c: e7:b0:3d:3b:15:76:7e:a5:24:c4:24:40:70:0c:dd:ba:7a:fa: 76:76:91:b1:a9:1f:11:60:a9:6c:99:58:34:ec:55:23:2a:f1: 0a:56:d8:6f:8c:81:b1:86:d1:4d:48:cc:84:58:49:7a:84:2b: d1:2a:f4:46:e0:d8:50:98:fa:27:0a:89:e1:62:6b:e5:dc:17: 2d:dd:04:e2:7e:e6:db:a6:ac:5a:6f:cd:d9:83:b5:3e:f0:aa: 39:ba:93:9a:e5:3d:56:88:00:44:18:23:5e:c3:8e:d2:16:1f: 9c:d5:4d:dd:da:ae:7a:6d:e9:88:a5:78:7f:15:3a:4c:8b:e2: a8:be:0a:6f:cc:9e:c5:7a:88:36:8b:dd:5b:66:e1:c1:03:71: 15:29:14:d9:0c:e7:d5:49:2e:43:5e:92:0b:6a:b5:98:2e:8c: 6f:3c:35:b4:49:d8:3b:ea:cf:cf:58:63:2c:16:45:72:33:0f: fb:e4:98:0f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMwMDgyNzA3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFBOTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlE NTc0M0I0NzQ1QkY1OTA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKRxtqu2Q059Bnaph/IjLOV2bgJORpymyhmjls1NU2ffsi3SygdcPY4gqVAMAmic VX3r492TmC9dwIc9Vd4Xeb8i7XHJ130V1a12M02od3qxDxUGDmo3SI5XnsZePuF0 Za/KyerBcbmzxnaWletdzol3zcxzTu3oYmVrGe2FgH74MwapN+Njf2rn/CFx0LGT 8eS96LxQqP2PV6g2wLq4UdAXomLg4NHSWu08iV8yitkLslck0HtWXlwxoGxMc/mc Q9CmK489W+RY4mShKOl+qgcwNyYuhPyqcwkomzvlK3r+IE6dB3h34fhhRRcqSqQO w5NNlSqJRPmsZJTkLbeM1Q8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQPVGep0esJ i1LME51XQ7R0W/WQdTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk3MjAvNTE5QzEwNEVFNTU5MTFGMEIyMjg4OTU4Mzg2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE5NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhy Q1l0U3pCT2RWME8wZEZ2MWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPZjANBgkqhkiG9w0BAQsFAAOCAQEAeY9jMyOZj8yLkU3t0in3 xxWRcfxGwwo5LKaU2d6ike4ncXsXUlMrFxsz9GeHTHPP63KZOge+FYc7k+Zht415 /5eqBfUhaIFM57A9OxV2fqUkxCRAcAzdunr6dnaRsakfEWCpbJlYNOxVIyrxClbY b4yBsYbRTUjMhFhJeoQr0Sr0RuDYUJj6JwqJ4WJr5dwXLd0E4n7m26asWm/N2YO1 PvCqObqTmuU9VogARBgjXsOO0hYfnNVN3dquem3piKV4fxU6TIviqL4Kb8yexXqI NovdW2bhwQNxFSkU2Qzn1UkuQ16SC2q1mC6Mbzw1tEnYO+rPz1hjLBZFcjMP++SY Dw== -----END CERTIFICATE-----Generated at Sat Jan 10 06:29:29 2026 by rpki-client